Verify this release

Your account key is made and used inside the web app, so a changed copy of the app could steal it. Each release comes with a list of SHA-256 hashes, one for every file. We publish the list here, on a different server from the app, so you can check the two match.

This release

The list: SHA256SUMS. Its own SHA-256 hash is eabe3a08ea2500f4c58057153d707ca2fa86295d78a111a76960556c8afa182c.

The app loads no third-party scripts, so these files are everything it runs.

Check it

On macOS or Linux, in an empty folder:

curl -fsSLO https://ai.imdawon.com/verify/SHA256SUMS
awk '{print $2}' SHA256SUMS | while read -r f; do
  curl -fsSL --create-dirs -o "$f" "https://app.ai.imdawon.com/$f"
done
shasum -a 256 -c SHA256SUMS

Every line should end in OK. On Linux without shasum, use sha256sum -c SHA256SUMS.

We’ll publish the web app’s source code before the public launch. Then you can build this release yourself and check that the build writes the same SHA256SUMS.

What this proves

That the app server sends the published files at the moment you check. It can’t prove what your browser loaded on another visit, so check again after an update.